OVD 11g Group Searches Are Very Slow And Timing Out From Application After Applying Fork Join Plugin To The Join Adapter (Doc ID 1551089.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.6.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, i.e. 11.1.1.6.0.

OVD configuration:
- ou=staticgroups,dc=ovd,dc=com
-------Group1
-------Group2
-------ou=XYZ (from LDAP server)
-------ou=ABC (from LDAP server)

Group search query - Query 1:

ldapsearch -h ovdhost.mycompany.com -p 6501 -D cn=orcladmin -w <password> -b "ou=staticgroups,dc=ovd,dc=com" -s sub "(&(objectclass=groupofuniquenames)(cn=*))" dn

Group membership search query - Query 2:

ldapsearch -h ovdhost.mycompany.com -p 6501 -D cn=orcladmin -w <password> -b "ou=staticgroups,dc=ovd,dc=com" -s sub "(uniqueMember=cn=my user,ou=employee,dc=ovd,dc=com)"

In order to resolve the group-membership query, added a fork join plugin to the staticgroup join adapter (ou=staticgroups).  This worked to return results for membership of the groups, i.e. Query 2, but Query 1 then started running very slow.  In addition, due to the fork join, the ou=staticgroups now has entries from LDAP adapters which are not required.

Any searches on groupOfuniqueNames is searching in the entire structure which made OVD UI very slow and the search results are timing out from application.  For example, all group searches are taking ~2 minutes to return ~35 groups.

The required groups are Group1, Group2, and not the groups present in OUs of the LDAP servers.

If doing an ldapsearch with scope one,  then the performance is better and getting desired results in less time.

Need a solution to restrict search to scope one in staticgroup join adapter so that even if the client searches with scope subtree, it does not return all of those OU groups.

Changes

Added a forkjoin plugin to a staticgroup join adapter (ou=staticgroups).

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms